Lucene search
+L

3456 matches found

CVE
CVE
added 2024/10/23 2:59 p.m.72 views

CVE-2024-30122

CVE-2024-30122 affects HCL Sametime due to misconfigured security-related HTTP headers; some headers are missing from web service responses, causing browser default policy handling to be less secure. Root cause: HTTP header omissions in Sametime web responses. Documents provide descriptions acros...

5.8CVSS5.5AI score0.00221EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/10/23 2:59 p.m.29 views

CVE-2024-30122 HCL Sametime is impacted by misconfigured security related HTTP headers

HCL Sametime is impacted by misconfigured security related HTTP headers. It was identified that some HTTP headers were missing on web service responses. This will lead to less secure browser default treatment for the policies controlled by these headers...

5.8CVSS7.2AI score0.00221EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/10/23 12:00 a.m.9 views

HCL Sametime 安全漏洞

HCL Sametime is a conferencing solution from HCL Corporation, USA. A security vulnerability exists in HCL Sametime that stems from being affected by an error message containing sensitive information...

5.3CVSS6.7AI score0.00232EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/10/23 12:00 a.m.15 views

PT-2024-23198

Name of the Vulnerable Software and Affected Versions HCL Sametime affected versions not specified Description The issue concerns insecure services in-use on the UIM client by default. Specifically, an unused legacy REST service was enabled by default using the HTTP protocol. This could potential...

4CVSS6.5AI score0.00167EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/10/23 12:00 a.m.15 views

HCL Sametime 安全漏洞

HCL Sametime is a conferencing solution from HCL Corporation, USA. A security vulnerability exists in HCL Sametime v12.0.2 and prior versions, which stems from the use of an unused, legacy REST service enabled using the HTTP protocol, which could be used maliciously by an attacker with this servi...

4CVSS6.7AI score0.00167EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/10/23 12:00 a.m.9 views

HCL Sametime 安全漏洞

HCL Sametime is a conferencing solution from HCL Corporation, USA. A security vulnerability exists in HCL Sametime v12.0.2 and earlier versions, which stems from being affected by misconfigured HTTP headers, causing the browser to be less secure when handling policies controlled by these headers ...

5.8CVSS6.8AI score0.00221EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2024/10/17 12:00 a.m.37 views

HCL BigFix Server 9.5.x < 9.5.25 / 10.0.x < 10.0.12 / 11.0.x < 11.0.3 DLL Hijacking (KB0116659)

The version of HCL BigFix Server installed on the remote host is 9.5.x prior to 9.5.25, 10.0.x prior to 10.0.12 or 11.x prior to 11.0.3. It is, therefore, affected by a DLL hijacking vulnerability as referenced in the KB0116659 advisory, where a dynamic search for a prerequisite library could all...

5.3CVSS5.7AI score0.002EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/10/14 10:55 p.m.15 views

CVE-2024-30117 HCL BigFix Platform is affected by a DLL Hijack vulnerability

A dynamic search for a prerequisite library could allow the possibility for an attacker to replace the correct file under some circumstances...

2.5CVSS6.8AI score0.002EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/10/14 10:55 p.m.40 views

CVE-2024-30117 HCL BigFix Platform is affected by a DLL Hijack vulnerability

A dynamic search for a prerequisite library could allow the possibility for an attacker to replace the correct file under some circumstances...

2.5CVSS0.002EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/10/14 12:00 a.m.15 views

HCL BigFix Platform 安全漏洞

HCL BigFix Platform is a suite of endpoint security management platforms from HCL Corporation, USA. The platform supports automated discovery, management and remediation of endpoint security issues. A security vulnerability exists in the HCL BigFix Platform that stems from the fact that a dynamic...

5.3CVSS6.7AI score0.002EPSS
SaveExploits0References2
OSV
OSV
added 2024/10/09 8:15 p.m.13 views

CVE-2024-30118

HCL Connections is vulnerable to an information disclosure vulnerability which could allow a user to obtain sensitive information they are not entitled to because of improperly handling the request data...

5.7CVSS5.8AI score0.00309EPSS
SaveExploits0References1
NVD
NVD
added 2024/10/09 8:15 p.m.29 views

CVE-2024-30118

HCL Connections is vulnerable to an information disclosure vulnerability which could allow a user to obtain sensitive information they are not entitled to because of improperly handling the request data...

5.7CVSS0.00309EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/10/09 8:03 p.m.15 views

CVE-2024-30118 HCL Connections is susceptible to a sensitive information disclosure vulnerability

HCL Connections is vulnerable to an information disclosure vulnerability which could allow a user to obtain sensitive information they are not entitled to because of improperly handling the request data...

3.5CVSS6.2AI score0.00309EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/10/09 8:03 p.m.36 views

CVE-2024-30118 HCL Connections is susceptible to a sensitive information disclosure vulnerability

HCL Connections is vulnerable to an information disclosure vulnerability which could allow a user to obtain sensitive information they are not entitled to because of improperly handling the request data...

3.5CVSS0.00309EPSS
SaveExploits0References1
CVE
CVE
added 2024/10/09 8:03 p.m.67 views

CVE-2024-30118

CVE-2024-30118 affects HCL Connections and involves an information disclosure vulnerability caused by improper handling of request data. The available sources (NVD/NVD-derived) indicate a HIGH confidentiality impact with a LOW attack complexity and network vector, but no specific vulnerable versi...

5.7CVSS3.8AI score0.00309EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/10/09 12:00 a.m.10 views

PT-2024-23194 · Hcl · Hcl Connections

Name of the Vulnerable Software and Affected Versions: HCL Connections affected versions not specified Description: The issue is related to an information disclosure vulnerability. It could allow a user to obtain sensitive information they are not entitled to because of improperly handling the...

5.7CVSS6.5AI score0.00309EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2024/10/09 12:00 a.m.13 views

HCL Connections 安全漏洞

HCL Connections is a suite of enterprise collaboration platforms from HCL Corporation, USA. A security vulnerability exists in HCL Connections that stems from vulnerability to an information disclosure vulnerability that allows users to access sensitive information to which they are not entitled...

5.7CVSS6.1AI score0.00309EPSS
SaveExploits0References2
OSV
OSV
added 2024/10/01 12:15 p.m.10 views

CVE-2024-30132

HCL Nomad server on Domino did not configure certain HTTP Security headers by default which could allow an attacker to obtain sensitive information via unspecified vectors...

7.5CVSS5.8AI score0.0031EPSS
SaveExploits0References1
NVD
NVD
added 2024/10/01 12:15 p.m.33 views

CVE-2024-30132

HCL Nomad server on Domino did not configure certain HTTP Security headers by default which could allow an attacker to obtain sensitive information via unspecified vectors...

7.5CVSS0.0031EPSS
SaveExploits0References1
CVE
CVE
added 2024/10/01 12:10 p.m.57 views

CVE-2024-30132

CVE-2024-30132 concerns the HCL Nomad server on Domino not configuring certain HTTP security headers by default. Connected sources identify the vulnerable component as the HCL Nomad server on Domino, with the issue tied to missing default HTTP security headers, enabling potential information disc...

7.5CVSS3.9AI score0.0031EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder